Information disclosure

2014-02-2115:30:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.6%

JSON

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CPENameOperatorVersion
sharefile_mobilele2.4
sharefile_mobile_for_tabletsle2.4

CPE	Name	Operator	Version
	sharefile_mobile	le	2.4
	sharefile_mobile_for_tablets	le	2.4

References

secunia.com/advisories/57020

support.citrix.com/article/CTX140303

www.securitytracker.com/id/1029791